Sap: >> Businessobjects Business Intelligence Platform >> 4.1 Security Vulnerabilities
SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2, does not sufficiently encode user-controlled inputs and allows an attacker to store malicious scripts in the input controls, resulting in Stored Cross-Site Scripting.
CVSS Score
5.4
EPSS Score
0.003
Published
2019-10-08
SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before version 4.2, does not sufficiently encode user-controlled inputs and allows an attacker to store malicious scripts in the file name of the background image resulting in Stored Cross-Site Scripting.
CVSS Score
5.4
EPSS Score
0.003
Published
2019-10-08
Page 3